mlsanityData to 14 Oct 2026

Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs

arXiv 2509.02820 ↗First posted 2 Sep 2025cs.LGcited by 11

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Unlearning in large language models (LLMs) involves precisely removing specific information from a pre-trained model. This is crucial to ensure safety of LLMs by deleting private data or harmful knowledge acquired during pre-training. However, existing unlearning methods often fall short when subjected to thorough evaluation. To overcome this, we introduce JensUn, where we leverage the Jensen-Shannon Divergence as the training objective for both forget and retain sets for more stable and effective unlearning dynamics compared to commonly used loss functions. In extensive experiments, JensUn achieves better forget-utility trade-off than competing methods, and even demonstrates strong resilience to benign relearning. Additionally, for a precise unlearning evaluation, we introduce LKF, a curated dataset of lesser-known facts that provides a realistic unlearning scenario. Finally, to comprehensively test unlearning methods, we propose (i) employing an LLM as semantic judge instead of the standard ROUGE score, and (ii) using worst-case unlearning evaluation over various paraphrases and input formats. Our improved evaluation framework reveals that many existing methods are less effective than previously thought.

Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 43 of its 52 references that are in the map. First posted on arXiv 2 Sep 2025.

Builds on

43 of 52 references.

Closest ancestors · 15

Same direction, newest first

  1. 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
  2. 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
  3. 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
  4. 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progress3 Oct
  5. 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
  6. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  7. 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
  8. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  9. 2024Rethinking Machine Unlearning for Large Language Models13 Feb
  10. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  11. 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
  12. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
3 more
  1. 2023Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutions8 Jul
  2. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  3. 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May

Other references · 28

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  3. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  4. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  5. 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
  6. 2022Locating and Editing Factual Associations in GPTcited by 2,691
  7. 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
  8. 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
  9. 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,417
  10. 2022Editing Models with Task Arithmeticcited by 1,120
  11. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  12. 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 897
16 more
  1. 2025Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAscited by 521
  2. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  3. 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
  4. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
  5. 2021Enhanced Membership Inference Attacks against Machine Learning Modelscited by 248
  6. 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
  7. 2023Copyright Violations and Large Language Modelscited by 108
  8. 2023Identifying and Mitigating the Security Risks of Generative AIcited by 91
  9. 2024Long Is More for Alignment: A Simple but Tough-to-Beat Baseline for Instruction Fine-Tuningcited by 85
  10. 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
  11. 2021Generalized Jensen-Shannon Divergence Loss for Learning with Noisy Labelscited by 74
  12. 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
  13. 2024JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Frameworkcited by 47
  14. 2023Knowledge Sanitization of Large Language Modelscited by 37
  15. 2023Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Modelscited by 12
  16. 2024Rethinking How to Evaluate Language Model Jailbreakcited by 12

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 4; 2026: 7.

11 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap
  2. 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data
  3. 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
  4. 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs
  5. 2025SEPS: A Separability Measure for Robust Unlearning in LLMs
  6. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs
  7. 2026Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs
  8. 2024Towards Robust Evaluation of Unlearning in LLMs via Data Transformations